Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0D5BEB360D6611F1B118FBEADAE4EC9C.roa
File: 0D5BEB360D6611F1B118FBEADAE4EC9C.roa (raw, json)
Hash identifier: kR46b641Dd8NshEkIHQ2L5BPomE48UW+uPSmImSKtSU=
Subject key identifier: 34:2B:A2:23:8F:06:27:2F:34:EC:88:BE:4C:95:82:61:A6:14:34:0A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1E03
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0D5BEB360D6611F1B118FBEADAE4EC9C.roa
Signing time: Thu 19 Feb 2026 07:39:01 +0000
ROA not before: Thu 19 Feb 2026 07:38:54 +0000
ROA not after: Sat 19 Feb 2028 07:38:54 +0000
asID: 201341
IP address blocks: 154.16.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 24 Feb 2026 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7683 (0x1e03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 19 07:38:54 2026 GMT
Not After : Feb 19 07:38:54 2028 GMT
Subject: CN=6996be15-0584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8c:09:ed:95:42:48:8f:5a:ec:0c:76:11:fd:
52:11:12:f5:16:48:ce:df:e9:c5:2e:8c:55:19:bc:
57:dd:55:42:77:55:0f:a9:96:bb:b8:75:74:27:54:
e9:de:bd:1d:a7:d2:03:16:59:05:01:68:03:05:bc:
6b:26:d8:64:1a:9f:0d:8d:5d:91:8d:50:ac:1f:a1:
31:85:e0:c6:6c:fb:09:67:02:08:cc:ac:0b:10:4a:
89:94:5c:16:80:c2:58:13:fd:d0:5d:55:cc:73:7e:
6d:b3:1d:f6:49:eb:f9:2c:d9:cd:96:16:48:09:9f:
4c:a4:65:51:ef:c0:ae:b1:6f:67:17:87:fd:60:4e:
43:8c:0f:39:a8:39:0d:39:f1:4d:a5:2f:0d:d2:6c:
a0:6a:e4:73:c3:3d:a3:6c:af:77:87:dd:c7:1c:6a:
82:6b:f6:51:93:37:76:c6:7e:7d:69:14:d6:32:7c:
dd:69:fa:d1:c8:8b:4e:25:93:36:4b:8f:0d:b9:34:
a0:93:74:41:13:cb:99:96:d9:70:2a:94:2b:0c:f0:
b1:4d:98:69:3b:4b:5f:60:7d:15:d1:b5:29:73:28:
98:bf:5d:20:17:b7:51:ee:f2:eb:4a:a1:c4:cd:7a:
98:d2:27:29:83:f9:82:8d:6b:3e:57:c7:3e:b9:0e:
19:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2B:A2:23:8F:06:27:2F:34:EC:88:BE:4C:95:82:61:A6:14:34:0A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0D5BEB360D6611F1B118FBEADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.34.0/24
Signature Algorithm: sha256WithRSAEncryption
60:f5:9c:6b:e8:cc:85:19:37:a7:25:8a:d0:28:a2:0a:80:76:
54:c1:b3:09:33:56:95:48:e7:de:a5:d7:91:ea:00:af:b5:04:
e7:48:13:f6:f9:57:d7:f8:e2:61:6f:c8:20:84:0a:14:ac:cd:
ac:17:7b:4c:99:2a:6a:60:eb:82:35:78:3f:70:28:55:5d:d1:
c2:8c:e3:98:22:80:c0:f9:02:11:2b:b1:1a:b3:58:d5:25:69:
7d:45:17:28:e8:41:6c:f9:a3:b7:3c:bb:5d:b7:1d:21:00:a9:
a5:d3:43:aa:9e:67:65:eb:0c:07:30:e9:b3:05:64:5b:6d:da:
c4:e3:b7:78:5e:61:54:68:3e:e4:c9:2e:5b:9d:d7:cd:5c:53:
dc:0d:3f:b3:44:df:4c:93:cb:59:b7:46:8c:59:69:1d:8e:ed:
7d:85:ad:94:17:63:c6:d3:61:18:89:8c:3e:69:1f:9a:2c:40:
73:97:11:97:fd:04:17:97:c9:be:b7:61:09:4b:75:62:c9:67:
a5:f4:0c:c1:1d:23:66:2d:62:0d:ed:86:41:e0:c4:d4:6f:76:
65:46:69:8b:f0:47:86:8d:11:45:bc:01:6f:86:90:6d:d0:8f:
0b:41:a2:7e:c7:c6:70:63:75:0a:df:13:32:00:bb:ea:c1:57:
2d:3b:5f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 01:17:35 2026 by rpki-client